Siemens Solid Edge SEListCtrlX ActiveX Memory Corruption Vulnerability
BID:60161
Info
Siemens Solid Edge SEListCtrlX ActiveX Memory Corruption Vulnerability
| Bugtraq ID: | 60161 |
| Class: | Design Error |
| CVE: | |
| Remote: | Yes |
| Local: | No |
| Published: | May 26 2013 12:00AM |
| Updated: | Oct 04 2013 12:14AM |
| Credit: | rgod |
| Vulnerable: | |
| Not Vulnerable: | |
Discussion
Siemens Solid Edge SEListCtrlX ActiveX Memory Corruption Vulnerability
Siemens Solid Edge SEListCtrlX ActiveX control is prone to a memory corruption vulnerability because the application fails to perform adequate boundary checks on user-supplied data.
An attacker may exploit this issue to execute arbitrary code in the context of the application (typically Internet Explorer) using the ActiveX control. Failed exploit attempts will likely result in denial-of-service conditions.
Siemens Solid Edge SEListCtrlX ActiveX control is prone to a memory corruption vulnerability because the application fails to perform adequate boundary checks on user-supplied data.
An attacker may exploit this issue to execute arbitrary code in the context of the application (typically Internet Explorer) using the ActiveX control. Failed exploit attempts will likely result in denial-of-service conditions.
Exploit / POC
Siemens Solid Edge SEListCtrlX ActiveX Memory Corruption Vulnerability
The following exploits are available:
The following exploits are available:
Solution / Fix
Siemens Solid Edge SEListCtrlX ActiveX Memory Corruption Vulnerability
Solution:
Currently we are not aware of any vendor-supplied patches. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].
Solution:
Currently we are not aware of any vendor-supplied patches. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].
References
Siemens Solid Edge SEListCtrlX ActiveX Memory Corruption Vulnerability
References:
References:
- Siemens Homepage (Siemens)